Saturday

iOS 7 flaw can disable 'Find my iPhone' function sans password


Bad news for owners of iPhones using iOS 7: the anti-theft app "Find my iPhone" can be disabled even without a password, no thanks to a flaw in the operating system.

Enthusiast site MacRumors said the bug in effect can potentially allow the iPhone to be "hidden" from Apple's iCloud.com.

"This is a potentially serious bug as Find My iPhone is a useful method of locating a lost device," it said.

But the consolation for users is that this exploit does not remove Apple's Activation Lock theft deterrent system.



With Apple's activation lock, the device will remain locked to the original account and continue to ask for that Apple ID and password during the setup process.

Simple steps

MacRumors said deactivating "Find My iPhone" can be easily repeated on devices running the current version of iOS (7.0.4), and involves making simple changes to the iCloud account section of the Settings app.

However, it noted it could not get the exploit to work on a device running iOS 7.1, "so the flaw will likely be fixed with the upcoming update."

Also, it noted the exploit only works on a device that does not have Touch ID or a Passcode enabled, as the exploit requires access to the Settings menu.

"To avoid having Find My iPhone disabled, users should update their phones with a Passcode and install iOS 7.1 when Apple releases the software," it advised. — TJD, GMA News

source: gmanetwork.com